Multiscreen secure content access

Patent metadata

Field	Value
Publication number	US-9846783-B2
Application number	US-201615335952-A
Country	US
Kind code	B2
Filing date	Oct 27, 2016
Priority date	Mar 10, 2015
Publication date	Dec 19, 2017
Grant date	Dec 19, 2017

Abstract

Methods and systems for securely accessing content irrespective of the security of the environment in which the content is being accessed are described herein. In some embodiments, a mobile computing device may determine whether secure enterprise content is being accessed on a mobile computing device. In response to determining that a private user device (e.g., virtual reality or augmented reality headwear/eyewear), is communicatively coupled to the mobile computing device, the mobile computing device may prevent the secure content from display on the mobile computing device and instead generate the secure enterprise content for presentation in an unencrypted form on the private user device.

First claim

What is claimed is:

1. A method comprising:
receiving, at a mobile computing device, secure enterprise content;
determining, by the mobile computing device, whether the secure enterprise content is being accessed on the mobile computing device;
responsive to determining that the secure enterprise content is being accessed on the mobile computing device:
identifying that the mobile computing device is connected to a public network;
responsive to identifying that the mobile computing device is connected to the public network, preventing, by the mobile computing device, the secure enterprise content from being presented in an unencrypted form on the mobile computing device;
encrypting, by the mobile computing device, the secure enterprise content for presentation in an encrypted form on the mobile computing device;
determining, by the mobile computing device, whether a private user device is communicatively coupled to the mobile computing device; and
responsive to determining that the private user device is communicatively coupled to the mobile computing device, transmitting, by the mobile computing device, the secure enterprise content to the private user device via the public network to generate the secure enterprise content for presentation in an unencrypted form on the private user device.

2. The method of claim 1 , wherein the private user device comprises a head-mounted display device configured to place a display screen in physical proximity to a wearer's eye and visible only to the wearer.

3. The method of claim 1 , further comprising generating non-secure content for presentation in an unencrypted form on the mobile computing device.

4. The method of claim 1 , wherein the encrypting the secure enterprise content for presentation in an encrypted form on the mobile computing device further comprises:
generating a blank area on a display screen of the mobile device, wherein the blank area is generated on an area of the display screen of the mobile device corresponding to the secure enterprise content.

5. The method of claim 1 , wherein the secure enterprise content is encrypted for presentation in the encrypted form in response to:
determining that the mobile computing device is in a public environment; and
determining that a secure mode to encrypt secure enterprise content on the mobile computing device has been enabled.

6. The method of claim 1 , wherein encrypting the secure enterprise content for presentation in the encrypted form further comprises:
determining that content is to be presented on the mobile computing device;
determining a portion of the content to be presented on the mobile computing device that comprises the secure enterprise content; and
encrypting the portion of the content to be presented that comprises the secure enterprise content.

7. The method of claim 1 , further comprising:
instructing the private user device to collect authentication information from a wearer of the private user device;
receiving the authentication information from the private user device; and
using the authentication information received from the private user device to authenticate the wearer of the private user device.

8. The method of claim 1 , wherein instructing the private user device to generate the secure enterprise content for presentation in an unencrypted form comprises:
determining that a wearer of the private user device has been authenticated;
generating the secure enterprise content into an unencrypted presentable form; and
transmitting the secure enterprise content to the private user device.

9. The method of claim 1 , further comprising:
determining whether any additional content is to be generated for presentation based on a received user input;
responsive to determining that additional content is to be generated based on the received user input, determining which portion of the additional content generated for presentation comprises additional secure enterprise content;
encrypting the portion of the additional content to be presented that comprises the additional secure enterprise content; and
generating the additional secure enterprise content for presentation in an encrypted form on the mobile computing device.

10. The method of claim 9 , further comprising:
determining that a wearer of the private user device has been authenticated;
generating the additional secure enterprise content into an unencrypted presentable form; and
transmitting the additional secure enterprise content to the private user device for presentation in an unencrypted form.

11. An apparatus comprising:
at least one processor;
at least one display screen; and
at least one memory storing computer-readable instructions that, when executed by the at least one processor, cause the apparatus to:
receive secure enterprise content;
determine whether the secure enterprise content is being accessed on the apparatus;
responsive to determining that the secure enterprise content is being accessed on the apparatus:
identify that the apparatus is connected to a public network;
responsive to identifying that the apparatus is connected to the public network, prevent the secure enterprise content from being presented in an unencrypted form on the apparatus;
encrypt the secure enterprise content for presentation in an encrypted form on the apparatus;
determine whether a private user device is communicatively coupled to the apparatus; and
responsive to determining that the private user device is communicatively coupled to the apparatus, transmit the secure enterprise content to the private user device via the public network to generate the secure enterprise content for presentation in an unencrypted form on the private user device.

12. The apparatus of claim 11 , wherein the instructions, when executed by the at least one processor, cause the apparatus to encrypt the secure enterprise content for presentation in an encrypted form on the apparatus by further causing the apparatus to:
generate a blank area on the at least one display screen of the apparatus, wherein the blank area is generated on an area of the at least one display screen of the apparatus corresponding to the secure enterprise content.

13. The apparatus of claim 11 , wherein the instructions, when executed by the at least one processor, cause the apparatus to encrypt the secure enterprise content for presentation in an encrypted form by further causing the apparatus to:
determine that the apparatus is in a public environment; and
determine that a secure mode to encrypt secure enterprise content on the apparatus has been enabled.

14. The apparatus of claim 11 , wherein the instructions, when executed by the at least one processor, further cause the apparatus to generate non-secure content for presentation in an unencrypted form on the apparatus.

15. The apparatus of claim 11 , wherein the instructions, when executed by the at least one processor, cause the apparatus to encrypt the secure enterprise content for presentation in an encrypted form by further causing the apparatus to:
determine that content is to be presented on the apparatus;
determine a portion of the content to be presented on the apparatus comprises the secure enterprise content; and
encrypt the portion of the content to be presented that comprises the secure enterprise content.

16. The apparatus of claim 11 , wherein the instructions, when executed by the at least one processor, further cause the apparatus to:
instruct the private user device to collect authentication information from a wearer of the private user device;

Assignees

• Citrix Systems Inc

Inventors

• Goyal Ashish

Classifications

• H04L63/0492 Primary

  by using a location-limited connection, e.g. near-field communication or limited proximity of entities · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• G06F3/14

  Digital output to display device {; Cooperation and interconnection of the display device with other functional units} · CPC title

• G02B2027/014

  comprising information/image processing systems · CPC title

• H04W4/023

  using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds · CPC title